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Amendment to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims : 

1. (canceled) 

2. (currently amended) A method of implementing an elliptic curve 
cryptographic operation in an -a cryptographic apparatus implementing an elliptic 
curve cryptography in a finite field of characteristic 2 (or an extension field of "2"), in 
which said elliptic curve is given by y 2 + xy = ax 2 + b and in which x and y are 
variables in an x-y coordinate system, a and b are parameters, addition of points P1 
(x1 , y1 ) and P2 (x2, y2) on said elliptic curve composed of points defined by 
individual coordinate components is presumed to be represented by P3 (x3, y3) with 
subtraction of said points P1 (x1 , y1 ) and P2 (x2, y2) being presumed to be 
represented by P4 (x4, y4), said method comprising the steps performed by said 
cryptographic apparatus, of: 

inputting the coordinate component x1 ; 

transforming said -the inputted coordinate component x1 into x- coordinates 
and z-coordinates [Xi, Z<\] of a projective space where z is a variable of a projective 
space where z is a variable in the z-coordinate; 

storing said coordinates [X^ Zi] of saiid projective space; 

transforming said -the coordinate component x2 into coordinates [X 2 , Z 2 ] of 
said projective space; 
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storing said -the projective coordinates [X 2 , Z 2 ]; 

transforming said- the coordinate component x4 into coordinates [X4, Z4] of 
said projective space; 

storing said -the coordinates [X4, Z4]; 

determining projective coordinates [X 3 , Z 3 ] from said -the stored projective 
coordinates [X1, Zi], [X 2 , Z2] and [X4, Z4]; 

transforming said projective coordinates [X 3 , Z 3 ] into said- the coordinate 
component x3; and 

outputting said coordinate component x3, 

whereby scalar multiplication of said point P1 (x1 , y1 ) is determined; 

generating a random number k; 

storing said generated random number k; 

transforming the x- coordinates into projective coordinates to thereby derive 
projective coordinates [k 2 x, k] through arithmetic operation of individual coordinate 
components of said projective space and said stored random number k. 

3. (currently amended) A method of implementing an elliptic curve 
cryptographic operation in aR- a cryptographic apparatus implementing an elliptic 
curve cryptography in a finite field of characteristic 2 (or an extension field of "2"), in 
which said elliptic curve is given by y 2 + xy = ax 2 + b and in which x and y are 
variables in an x-y coordinate system, a and b are parameters, addition of points P1 
(x1 , y1) and P2 (x2, y2) on said elliptic curve composed of points defined by 
individual coordinate components is presumed to be represented by P3 (x3, y3) with 
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subtraction of said points P1 (x1 , y1) and P2 (x2, y2) being presumed to be 
represented by P4 (x4, y4), said method comprising the steps performed by said 
cryptographic apparatus, of: 

inputting the coordinate component x1 ; 

transforming said -the inputted coordinate component x1 into x- and z- 
coordinates [X 1f Zi] of a projective space where z is a variable of a projective space 
where z is a variable in the z-coordinate; i 

storing said coordinates [Xi, Zi] of said projective space; 

transforming said -the coordinate component x2 into coordinates [X 2 , Z 2 ] of 
said projective space; 

storing said -the projective coordinates [X 2l Z 2 ]; 

transforming said -the coordinate component x4 into coordinates [X4, Z4] of 
said projective space; 

storing said -the coordinates [X4, Z4]; 

determining projective coordinates [X 3) Z 3 ] from said -the stored projective 
coordinates [X1, Zi], [X 2 , Z 2 ] and [X4, Z4]; 

transforming said-the_projective coordinates [X 3 , Z 3 ] into said coordinate 
component x3; and 

outputting said coordinate component x3, 

whereby scalar multiplication of said point P1 (x1 , y1 ) is determined; 

generating a random number k; 

storing said generated random number k; 

4 



^ U.S. Application No. 09/468,948 

transforming the x- coordinates into projective coordinates to thereby derive 
projective coordinates [kx, k] through arithmetic operation of individual coordinate 
components of said projective space and said stored random number k. 

4. - 5. (canceled) 

6. (previously presented) An apparatus implementing an elliptic curve 
cryptographic operation in a finite field of characteristic 2 (or an extension field of 
"2"), in which x and y are variables in an x-y coordinate system, a and b are 
parameters, said elliptic curve is given by y 2 + xy = x 3 + ax 2 + b, comprising: 

random number generating means for generating a random number k; 

projective coordinate transformation means receiving as inputs thereto 
coordinate xO of said finite field of characteristic 2 and said random number k, to 
thereby transform said coordinate xO into projective coordinates [kxO, k] = [Xi, Z,i]; 

doubling arithmetic means for arithmetically determining a double point from 
said projective coordinates [Xi, Z-i]; , 

addition arithmetic means for determining an addition point from said 
projective coordinate [Xi, Zi] where Z is a variable in the z-coordinate to thereby 
output said addition point; and 

scalar multiplication means receivingi information from said projective 
coordinate transformation means, said doubling arithmetic means and said addition 
arithmetic means to thereby perform scalar multiplication of the coordinate 
component xO. 
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7. (canceled) 

8. (currently amended) A recording medium storing a program for 
implementing an elliptic curve cryptographic operation, said recording medium being 
in afha cryptographic apparatus implementing an elliptic curve cryptography in a 
finite field of characteristic 2 (or an extension field of "2"), in which said elliptic curve 
is given by y 2 + xy = x 3 + ax 2 + b, in which x and y are variables in an x-y coordinate 
system, a and b are parameters, addition of points P1 (x1 , y1 ) and P2 (x2, y2) on 
said elliptic curve composed of points defined by individual coordinate components 
is presumed to be represented by P3 (x3, y3) with subtraction of points P1 (x1, y1) 
and P2 (x2, y2) being presumed to be represented by P4, (x4, y4), said program 
when executed causing the cryptographic apparatus to perform: 

inputting an coordinate component x1; 

transforming sai4 -the inputted coordinate component x1 into x- and z- 
coordinates [X 1( Zi] in a projective space; 

storing said coordinates [X 2 , Z 2 ] of said projective space; 

transforming said -the coordinate component x2 into coordinates [X 2 , Z 2 ] of 
said projective space; 

storing said -the projective coordinate [Xi, Zi] where z is a variable in the z- 
coordinate; , 

transforming said -the coordinate component x4 into coordinates PQ, Z4] of 
said projective space; 
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storing saict- the projective coordinates [X4, Z4]; 

determining projective coordinates [X 3 , Z 3 ] from said -the stored projective 
coordinates [X1, Z1], [X 2 , Z 2 ] and [X4, Z4]; 

transforming said projective coordinates [X 3 , Z 3 ] into sai4 -the coordinate 
component x3; and 

outputting said coordinate component x3, 

whereby scalar multiplication of said point P1 (x1 , y1) is determined; 

generating a random number k; 

storing said generated random number k; 

transforming the x- coordinates into projective coordinates to thereby derive 

! 

projective coordinates [k 2 x, k] through arithmetic operation of individual coordinate 
components of said projective space and said stored random number k. 

9. (currently amended) A recording medium storing a program for 
implementing an elliptic curve cryptographic operation, said recording medium being 
in afi -a cryptographic apparatus implementing an elliptic curve cryptography in a 
finite field of characteristic 2 (or an extension field of "2"), in which said elliptic curve 

is given by y 2 + xy = x 3 + ax 2 + b, in which x and y are variables in an x-y coordinate 

I 

system, a and b are parameters, addition of points P1 (x1, y1) and P2 (x2, y2) on 
said elliptic curve composed of points defined by individual coordinate components 
is presumed to be represented by P3 (x3, y3) with subtraction of points P1 (x1 , y1 ) 

and P2 (x2, y2) being presumed to be represented by P4, (x4, y4), said program 

t 

when executed causing the cryptographic apparatus to perform: 
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inputting an coordinate component x1 ; 

transforming said -the inputted coordinate component x1 into x- and z- 
coordinates [Xi, Zi] in a projective space; 

storing said coordinates [X 2 , Z 2 ] of said projective space; 

transforming said -the coordinate component x2 into coordinates [X 2 , Z 2 ] of 
said projective space; 

storing said -the projective coordinate [Xi, Zi] where z is a variable in the z- 
coordinate; ' 

transforming said -the coordinate component x4 into coordinates [X4, Z4] of 
said projective space; 

storing said -the projective coordinates [X4, Z4]; 

determining projective coordinates [X 3 , Z 3 ] from said -the stored projective 
coordinates [Xi, Zi], [X 2 , Z 2 ] and [X4, Z4]; 

transforming said projective coordinates [X 3 , Z 3 ] into said -the coordinate 
component x3; and 

outputting said coordinate component x3, 

whereby scalar multiplication of said point P1 (x1, y1) is determined; 
generating a random number k; 

storing said generated random number k; 

i 

transforming the x- coordinates into projective coordinates to thereby derive 
projective coordinates [kx, k] through arithmetic operation of individual coordinate 
components of said projective space and said stored random number k. 
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10. - 12. (canceled) ' 
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